Bug 1476307 - PackageKit-1.1.6-2 coredump
PackageKit-1.1.6-2 coredump
Status: NEW
Product: Fedora
Classification: Fedora
Component: PackageKit (Show other bugs)
26
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Richard Hughes
Fedora Extras Quality Assurance
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2017-07-28 11:11 EDT by H.J. Lu
Modified: 2017-07-28 11:11 EDT (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description H.J. Lu 2017-07-28 11:11:32 EDT
[root@gnu-6 /]# file core.6310
core.6310: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/libexec/packagekitd', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/libexec/packagekitd', platform: 'x86_64'
[root@gnu-6 /]# ls -l core.6310
-rw------- 1 root root 98025472 Jul 27 06:43 core.6310
[root@gnu-6 /]# gdb /usr/libexec/packagekitd core.6310
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/libexec/packagekitd...Reading symbols from /usr/libexec/packagekitd...(no debugging symbols found)...done.
(no debugging symbols found)...done.
[New LWP 6310]
[New LWP 6312]
[New LWP 6311]

warning: .dynamic section for "/lib64/libdnf.so.1" is not at the expected address (wrong library or version mismatch?)

warning: .dynamic section for "/lib64/libnssutil3.so" is not at the expected address (wrong library or version mismatch?)
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/libexec/packagekitd'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000000000000000 in ?? ()
[Current thread is 1 (Thread 0x7f2a797bfd80 (LWP 6310))]
Missing separate debuginfos, use: dnf debuginfo-install PackageKit-1.1.6-2.fc26.x86_64
(gdb) bt
#0  0x0000000000000000 in  ()
#1  0x00007f2a78731f09 in g_object_unref () at /lib64/libgobject-2.0.so.0
#2  0x00007f2a79239814 in pk_results_finalize ()
    at /lib64/libpackagekit-glib2.so.18
#3  0x00007f2a78731f09 in g_object_unref () at /lib64/libgobject-2.0.so.0
#4  0x0000002fbbbf1c8b in pk_transaction_finalize ()
#5  0x00007f2a78731f09 in g_object_unref () at /lib64/libgobject-2.0.so.0
#6  0x0000002fbbc0b568 in pk_scheduler_item_free ()
#7  0x0000002fbbc0bbbd in pk_scheduler_remove_internal ()
#8  0x0000002fbbc0bcbe in pk_scheduler_remove_item_cb ()
#9  0x00007f2a78455cad in g_timeout_dispatch () at /lib64/libglib-2.0.so.0
#10 0x00007f2a78455247 in g_main_context_dispatch () at /lib64/libglib-2.0.so.0
#11 0x00007f2a784555e8 in g_main_context_iterate.isra ()
    at /lib64/libglib-2.0.so.0
#12 0x00007f2a78455902 in g_main_loop_run () at /lib64/libglib-2.0.so.0
#13 0x0000002fbbbf03eb in main ()
(gdb) f 1
#1  0x00007f2a78731f09 in g_object_unref () from /lib64/libgobject-2.0.so.0
(gdb) disass
Dump of assembler code for function g_object_unref:
   0x00007f2a78731d50 <+0>:	push   %r14
   0x00007f2a78731d52 <+2>:	push   %r13
   0x00007f2a78731d54 <+4>:	mov    $0x50,%esi
   0x00007f2a78731d59 <+9>:	push   %r12
   0x00007f2a78731d5b <+11>:	push   %rbp
   0x00007f2a78731d5c <+12>:	push   %rbx
   0x00007f2a78731d5d <+13>:	mov    %rdi,%rbx
   0x00007f2a78731d60 <+16>:	callq  0x7f2a78752930 <g_type_check_instance_is_fundamentally_a>
   0x00007f2a78731d65 <+21>:	test   %eax,%eax
   0x00007f2a78731d67 <+23>:	jne    0x7f2a78731d90 <g_object_unref+64>
   0x00007f2a78731d69 <+25>:	lea    0x29d40(%rip),%rdx        # 0x7f2a7875bab0
   0x00007f2a78731d70 <+32>:	pop    %rbx
   0x00007f2a78731d71 <+33>:	pop    %rbp
   0x00007f2a78731d72 <+34>:	pop    %r12
   0x00007f2a78731d74 <+36>:	pop    %r13
   0x00007f2a78731d76 <+38>:	pop    %r14
   0x00007f2a78731d78 <+40>:	lea    0x2afa9(%rip),%rsi        # 0x7f2a7875cd28
   0x00007f2a78731d7f <+47>:	lea    0x27bbe(%rip),%rdi        # 0x7f2a78759944
---Type <return> to continue, or q <return> to quit---
   0x00007f2a78731d86 <+54>:	jmpq   0x7f2a78728088 <g_return_if_fail_warning@plt>
   0x00007f2a78731d8b <+59>:	nopl   0x0(%rax,%rax,1)
   0x00007f2a78731d90 <+64>:	mov    0x8(%rbx),%eax
   0x00007f2a78731d93 <+67>:	test   %eax,%eax
   0x00007f2a78731d95 <+69>:	je     0x7f2a78731de0 <g_object_unref+144>
   0x00007f2a78731d97 <+71>:	lea    0x8(%rbx),%r12
   0x00007f2a78731d9b <+75>:	lea    0x10(%rbx),%r13
   0x00007f2a78731d9f <+79>:	lea    0x23d47a(%rip),%r14        # 0x7f2a7896f220
   0x00007f2a78731da6 <+86>:	mov    (%r12),%ebp
   0x00007f2a78731daa <+90>:	cmp    $0x1,%ebp
   0x00007f2a78731dad <+93>:	jle    0x7f2a78731df0 <g_object_unref+160>
   0x00007f2a78731daf <+95>:	mov    %r13,%rdi
   0x00007f2a78731db2 <+98>:	callq  0x7f2a78728020 <g_datalist_get_flags@plt>
   0x00007f2a78731db7 <+103>:	lea    -0x1(%rbp),%edx
   0x00007f2a78731dba <+106>:	mov    %eax,%ecx
   0x00007f2a78731dbc <+108>:	mov    %ebp,%eax
   0x00007f2a78731dbe <+110>:	lock cmpxchg %edx,(%r12)
   0x00007f2a78731dc4 <+116>:	jne    0x7f2a78731da6 <g_object_unref+86>
   0x00007f2a78731dc6 <+118>:	mov    (%rbx),%rax
   0x00007f2a78731dc9 <+121>:	nop
---Type <return> to continue, or q <return> to quit---
   0x00007f2a78731dca <+122>:	cmp    $0x2,%ebp
   0x00007f2a78731dcd <+125>:	jne    0x7f2a78731dd4 <g_object_unref+132>
   0x00007f2a78731dcf <+127>:	and    $0x1,%ecx
   0x00007f2a78731dd2 <+130>:	jne    0x7f2a78731e28 <g_object_unref+216>
   0x00007f2a78731dd4 <+132>:	pop    %rbx
   0x00007f2a78731dd5 <+133>:	pop    %rbp
   0x00007f2a78731dd6 <+134>:	pop    %r12
   0x00007f2a78731dd8 <+136>:	pop    %r13
   0x00007f2a78731dda <+138>:	pop    %r14
   0x00007f2a78731ddc <+140>:	retq   
   0x00007f2a78731ddd <+141>:	nopl   (%rax)
   0x00007f2a78731de0 <+144>:	lea    0x29cde(%rip),%rdx        # 0x7f2a7875bac5
   0x00007f2a78731de7 <+151>:	jmp    0x7f2a78731d70 <g_object_unref+32>
   0x00007f2a78731de9 <+153>:	nopl   0x0(%rax)
   0x00007f2a78731df0 <+160>:	mov    0x23d43a(%rip),%esi        # 0x7f2a7896f230
   0x00007f2a78731df6 <+166>:	mov    %r13,%rdi
   0x00007f2a78731df9 <+169>:	callq  0x7f2a787281e0 <g_datalist_id_get_data@plt>
   0x00007f2a78731dfe <+174>:	test   %rax,%rax
   0x00007f2a78731e01 <+177>:	mov    %rax,%rbp
   0x00007f2a78731e04 <+180>:	je     0x7f2a78731e7b <g_object_unref+299>
---Type <return> to continue, or q <return> to quit---
   0x00007f2a78731e06 <+182>:	mov    %r14,%rdi
   0x00007f2a78731e09 <+185>:	callq  0x7f2a78728288 <g_rw_lock_writer_lock@plt>
   0x00007f2a78731e0e <+190>:	mov    (%r12),%eax
   0x00007f2a78731e12 <+194>:	cmp    $0x1,%eax
   0x00007f2a78731e15 <+197>:	je     0x7f2a78731e40 <g_object_unref+240>
   0x00007f2a78731e17 <+199>:	mov    %r14,%rdi
   0x00007f2a78731e1a <+202>:	callq  0x7f2a78728188 <g_rw_lock_writer_unlock@plt>
   0x00007f2a78731e1f <+207>:	jmp    0x7f2a78731da6 <g_object_unref+86>
   0x00007f2a78731e21 <+209>:	nopl   0x0(%rax)
   0x00007f2a78731e28 <+216>:	mov    %rbx,%rdi
   0x00007f2a78731e2b <+219>:	mov    $0x1,%esi
   0x00007f2a78731e30 <+224>:	pop    %rbx
   0x00007f2a78731e31 <+225>:	pop    %rbp
   0x00007f2a78731e32 <+226>:	pop    %r12
   0x00007f2a78731e34 <+228>:	pop    %r13
   0x00007f2a78731e36 <+230>:	pop    %r14
   0x00007f2a78731e38 <+232>:	jmpq   0x7f2a78731840 <toggle_refs_notify>
   0x00007f2a78731e3d <+237>:	nopl   (%rax)
   0x00007f2a78731e40 <+240>:	mov    0x0(%rbp),%rax
   0x00007f2a78731e44 <+244>:	test   %rax,%rax
   0x00007f2a78731e47 <+247>:	je     0x7f2a78731e6f <g_object_unref+287>
---Type <return> to continue, or q <return> to quit---
   0x00007f2a78731e49 <+249>:	nopl   0x0(%rax)
   0x00007f2a78731e50 <+256>:	mov    (%rax),%rax
   0x00007f2a78731e53 <+259>:	movq   $0x0,(%rax)
   0x00007f2a78731e5a <+266>:	mov    0x0(%rbp),%rdi
   0x00007f2a78731e5e <+270>:	mov    %rdi,%rsi
   0x00007f2a78731e61 <+273>:	callq  0x7f2a78728148 <g_slist_delete_link@plt>
   0x00007f2a78731e66 <+278>:	test   %rax,%rax
   0x00007f2a78731e69 <+281>:	mov    %rax,0x0(%rbp)
   0x00007f2a78731e6d <+285>:	jne    0x7f2a78731e50 <g_object_unref+256>
   0x00007f2a78731e6f <+287>:	lea    0x23d3aa(%rip),%rdi        # 0x7f2a7896f220
   0x00007f2a78731e76 <+294>:	callq  0x7f2a78728188 <g_rw_lock_writer_unlock@plt>
   0x00007f2a78731e7b <+299>:	mov    (%rbx),%rax
   0x00007f2a78731e7e <+302>:	nop
   0x00007f2a78731e7f <+303>:	mov    (%rbx),%rax
   0x00007f2a78731e82 <+306>:	mov    %rbx,%rdi
   0x00007f2a78731e85 <+309>:	callq  *0x28(%rax)
   0x00007f2a78731e88 <+312>:	mov    (%rbx),%rax
   0x00007f2a78731e8b <+315>:	nop
   0x00007f2a78731e8c <+316>:	mov    (%r12),%ebp
   0x00007f2a78731e90 <+320>:	cmp    $0x1,%ebp
   0x00007f2a78731e93 <+323>:	jle    0x7f2a78731eb8 <g_object_unref+360>
---Type <return> to continue, or q <return> to quit---
   0x00007f2a78731e95 <+325>:	mov    %r13,%rdi
   0x00007f2a78731e98 <+328>:	callq  0x7f2a78728020 <g_datalist_get_flags@plt>
   0x00007f2a78731e9d <+333>:	lea    -0x1(%rbp),%edx
   0x00007f2a78731ea0 <+336>:	mov    %eax,%ecx
   0x00007f2a78731ea2 <+338>:	mov    %ebp,%eax
   0x00007f2a78731ea4 <+340>:	lock cmpxchg %edx,(%r12)
   0x00007f2a78731eaa <+346>:	je     0x7f2a78731dc6 <g_object_unref+118>
   0x00007f2a78731eb0 <+352>:	jmp    0x7f2a78731e8c <g_object_unref+316>
   0x00007f2a78731eb2 <+354>:	nopw   0x0(%rax,%rax,1)
   0x00007f2a78731eb8 <+360>:	mov    0x23d39a(%rip),%esi        # 0x7f2a7896f258
   0x00007f2a78731ebe <+366>:	xor    %ecx,%ecx
   0x00007f2a78731ec0 <+368>:	xor    %edx,%edx
   0x00007f2a78731ec2 <+370>:	mov    %r13,%rdi
   0x00007f2a78731ec5 <+373>:	callq  0x7f2a78727f80 <g_datalist_id_set_data_full@plt>
   0x00007f2a78731eca <+378>:	mov    %rbx,%rdi
   0x00007f2a78731ecd <+381>:	callq  0x7f2a78746450 <g_signal_handlers_destroy>
   0x00007f2a78731ed2 <+386>:	mov    0x23d37c(%rip),%esi        # 0x7f2a7896f254
   0x00007f2a78731ed8 <+392>:	xor    %ecx,%ecx
---Type <return> to continue, or q <return> to quit---
   0x00007f2a78731eda <+394>:	xor    %edx,%edx
   0x00007f2a78731edc <+396>:	mov    %r13,%rdi
   0x00007f2a78731edf <+399>:	callq  0x7f2a78727f80 <g_datalist_id_set_data_full@plt>
   0x00007f2a78731ee4 <+404>:	mov    $0xffffffff,%eax
   0x00007f2a78731ee9 <+409>:	lock xadd %eax,(%r12)
   0x00007f2a78731eef <+415>:	mov    (%rbx),%rdx
   0x00007f2a78731ef2 <+418>:	nop
   0x00007f2a78731ef3 <+419>:	cmp    $0x1,%eax
   0x00007f2a78731ef6 <+422>:	jne    0x7f2a78731dd4 <g_object_unref+132>
   0x00007f2a78731efc <+428>:	mov    (%rbx),%rax
   0x00007f2a78731eff <+431>:	nop
   0x00007f2a78731f00 <+432>:	mov    (%rbx),%rax
   0x00007f2a78731f03 <+435>:	mov    %rbx,%rdi
   0x00007f2a78731f06 <+438>:	callq  *0x30(%rax)
=> 0x00007f2a78731f09 <+441>:	mov    (%rbx),%rax
   0x00007f2a78731f0c <+444>:	nop
   0x00007f2a78731f0d <+445>:	mov    %rbx,%rdi
   0x00007f2a78731f10 <+448>:	pop    %rbx
   0x00007f2a78731f11 <+449>:	pop    %rbp
   0x00007f2a78731f12 <+450>:	pop    %r12
   0x00007f2a78731f14 <+452>:	pop    %r13
   0x00007f2a78731f16 <+454>:	pop    %r14
---Type <return> to continue, or q <return> to quit---
   0x00007f2a78731f18 <+456>:	jmpq   0x7f2a78751530 <g_type_free_instance>
End of assembler dump.
(gdb)

Note You need to log in before you can comment on or make changes to this bug.